Principal Systems Analyst, Identity & Secrets

Salary: $129000 - 170000 per year Requirements: We are looking for a bachelors degree in Computer Science, Information Security, Engineering, or a related field; a masters degree is preferred. We require at least 5 years of experience in systems and technical analysis. We need strong hands-on expertise in HashiCorp Vault and non-interactive secrets workflows, including policies, authentication methods, KV, Transit, dynamic secrets, and integrations. We value advanced analytical and problem-solving ability, with a track record of turning complex, cross-domain challenges into clear, actionable pieces. We expect proven experience creating high-quality user stories, acceptance criteria, requirements documentation, and systems/process specifications. We are seeking excellent communication and facilitation skills, with the ability to align engineering, product, and business stakeholders. We look for a solid understanding of cloud infrastructure and identity, including AWS IAM roles/policies, Azure Managed Identities, Kubernetes workload identities, and service mesh patterns. We value knowledge of non-human identity and workload identity technologies such as SPIFFE/SPIRE, cloud workload identities, X.509/SVID issuance, and service authentication models. We will not provide immigration sponsorship for this position. Responsibilities: We lead discovery, analysis, and requirements gathering for non-interactive secrets management. We break down large initiatives into well-defined epics and user stories. We act as the teams primary analytical authority, making sure requirements are technically sound. We define functional specifications, workflows, integration requirements, and service consumption models for secrets management. We partner closely with engineers across the full delivery lifecycle, from design through deployment. We drive consistent onboarding and service patterns, self-service enablement, and operational excellence. We contribute to platform roadmaps, architecture discussions, control patterns, and capability evolution. Technologies: AWS Azure Cloud IAM Kubernetes Security LESS More: We are Fidelity and we are transitioning to a full-time onsite working model through a phased rollout across regions and roles, with onsite expectations varying by location and role. This position sits within our Information Technology organization and focuses on the early, critical phases of delivery for our non-interactive secrets management platforms. We operate in a highly regulated environment, and hiring may be impacted by applicable securities, investment, retirement, and self-regulatory requirements. last updated 28 week of 2026